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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 

application. 

Listing of the Claims: 

1 . (Currently Amended) In the network supporting virtual network connections 
associated with clients communicating through a first node, a method comprising: 

maintaining separate upstream routing policy information and downstream 
routing policy information at the first node, the upstream routing policy information being 
ysed configured at the first node to identify a second node to forward upstream traffic 
received from at least a first client communicating through the first node, the 
downstream routing policy information being used configured at the first node to forward 
downstream traffic received from a node to at least the first client; and 

for trafl^ic transmitted by the first client through the first node intended for receipt 
bv a second client downstream of the first node , preventing use of the downstream 
po l icy routing policy information to route the traffic intended for receipt by the second 
client and instead utilizing the upstream routing policy information in the first node to 
ensure forwarding of the traffic transmitted by the first client intended for receipt by the 
second client from the first node to the second node andi 

whoroin th o traffic transmittod by tho first cliont through tho first nodo intondod for 
r o ceipt by a socond client is forward e d to tho second node . 

2. (Cancelled) 

3. (Currently Amended) A method as in claim 1 further comprising: 

receiving a session initiation request from [[a]] the second client to establish a 
session to communicate through the first node; 

from an address server, obtaining network address assignment information for 
the first second client that generated the session initiation request, the assignment 
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information including network address information to be used for identifying the second 

client; and 

populating the downstream routing policy information at the first node to include 
the network address information identifying the second client. 

4. (Original) A method as in claim 3 further comprising: 

receiving a network message from the second client coupled to communicate 
through the first node, the network message intended for receipt by the first client; 

utilizing the upstream routing policy information in the first node to identify a path 
on which to forward the network message; and 

forwarding the network message from the first node along the path to the second 

node. 

5. (Original) A method as in claim 4 further comprising: 

based on routing policy information at the second node, establishing a return 
path between the second node and the first node on which to fonward the network 

messages to the first client through the first node. 

6. (Original) A method as in claim 1 further comprising: 

based on use of the upstream routing policy information and downstream policy 
information at the first node, establishing a VPN (Virtual Private Network) connection 
between the first node and the second node on which to forward traffic from the first 
client. 

7. (Original) A method as in claim 1 , wherein the second node is part of a service 
provider network and the traffic between the first and second node is at least partly 
supported by a core network supporting a label switching protocol. 

8. (Original) A method as in claim 1, wherein the upstream routing policy 
information and downstream policy information at the first node are each half duplex 
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VRFs (Virtual Routing and Forwarding Instances) supporting forwarding of network 
messages generated by multiple clients communicating with each other through the first 

node of the second node. 

9. (Original) A method as in claim 1 further comprising: 

at the second node, applying a target-specific packet processing technique to the 
traffic from the first client fonwarded through the second node. 

10. (Original) A method as in claim 1 further comprising: 

populating the downstream policy information at the first node with network 
address information of each new client associated with a given service supported by a 
corresponding service provider. 

1 1 . (Original) A method as in claim 1 0 further comprising: 

after the downstream policy infomnation is populated in the first node for a new 
client, distributing the network address information populated in the downstream policy 
information at the first node to the second node via use of a notification message 
distributed according to a system routing protocol. 

12. (Original) A method as in claim 1 1, wherein the system routing protocol is based 
on BGP (Border Gateway Protocol). 

1 3. (Currently Amended) A computer system at a first node of a network that at least 
partially supports a virtual network connection, the computer system comprising: 

a processor; 

a memory unit that stores instructions associated with an application executed by 
the processor; 

a communication interface that supports communication with other nodes of the 
physical network; and 
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an interconnect coupling the processor, the memory unit, and the communication 
interface, enabling the computer system to execute the application and perform 

operations of: 

maintaining separate upstream routing policy information and downstream 
routing policy information at the first node, the upstream routing policy 
information being used configured at the first node to identify a second node to 
fonward upstream traffic received from at least a first client communicating 
through the first node, the downstream routing policy information being used 
configured at least the first node to fonward downstream traffic received from a 
nod e to at loast the first client; and 

for traffic transmitted by the first client through the first node intended for 
receipt bv the second client downstream of the first node , preventing use of the 
downstream policy routing policy information to route the traffic intended for 
receipt bv the second client and instead utilizing the upstream routing policy 
information in the first node to ensure fonwarding of the traffic transmitted by the 
first client intended for receipt bv the second client from the first node to the 
second node ; and 

whorein tho traff i c transmitted by th o first cliont through the first node 
intended for roco i pt by a socond client is fon/vardod to tho socond nod e. 

14. (Cancelled) 

15. (Currently Amended) A computer system as in claim 13 that addifionaliy 
performs operations of: 

receiving a session initiation request from [[a]] the second client to establish a 
session to communicate through the first node; 

from an address server, obtaining network address assignment information for 
the fifst second client that generated the session initiation request, the assignment 
information Including network address Information to be used for Identifying the second 
client; and 
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populating the upstream routing policy information at the first node to include the 
network address information identifying the second client. 

16. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

receiving a network message from the second client coupled to communicate 
through the first node, the network message intended for receipt by the first client; 

utilizing the downstream routing policy information in the first node to identify a 
path on which to forward the network message; and 

forwarding the network message from the first node along the path to the second 

node. 

17. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

based on routing policy information at the second node, establishing a return 
path between the second node and the first node on which to forward the network 
messages to the first client through the first node. 

18. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

based on use of the upstream routing policy information and downstream policy 
information at the first node, establishing a VPN (Virtual Private Network) connection 
between the first node and the second node on which to fonward traffic from the first 

client. 

19. (Original) A computer system as in claim 13, wherein the second node is part of 
a service provider network and the traffic between the first and second node is at least 
partly supported by a core network supporting a label switching protocol. 
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20. (Original) A computer system as in claim 13, wherein the upstream routing policy 
information and downstream policy information at the first node are each half duplex 
VRFs (Virtual Routing and Forwarding Instances) supporting forwarding of network 
messages generated by multiple clients communicating with each other through the first 
node and the second node. 

21. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

at the second node, applying a target-specific packet processing technique to the 
traffic from the first client forwarded through the second node. 

22. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

populating the downstream policy information at the first node with network 
address information of each new client associated with a given service supported by a 
corresponding service provider. 

23. (Original) A computer system as in claim 22 that additional performs operations 
of: 

after the downstream policy information is populated in the first node for a new 
client, distributing the network address infomiation populated in the downstream policy 
information at the first node to the second node via use of a notification message 
distributed according the a system routing protocol. 

24. (Original) A computer system as in claim 23, wherein the system routing protocol 
is based on BGP (Border Gateway Protocol). 

25. -28. (Cancelled) 
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29. (New) In a network supporting virtual network connections associated with 
clients communicating through a first node, a method comprising: 

maintaining separate upstream routing policy information and downstream policy 
information at the first node, the upstream routing policy information being associated 
with a first path for traffic transmitted from a first client to a destination and the upstream 
routing policy information being used at the first node to identify a second node along 
the first path to forward upstream traffic received from the first client communicating 
through the first node, the downstream routing policy information being associated with 
a second path for traffic transmitted from the first client to the destination different from 
the first path; and 

for traffic transmitted by the first client through the first node, preventing use of 
the downstream policy routing information to route the traffic along the entire second 
path and instead utilizing the upstream routing policy information in the first node to 
ensure fonwarding of the traffic transmitted by the first client from the first node to the 
second node. 

30. (New) A method as in claim 29, wherein the destination is a second client; and 

wherein, the traffic transmitted by the first client through the first node intended 
for receipt by the second client is fonwarded to the second node. 

31 . (New) A method as in claim 29 further comprising: 

receiving a session initiation request from a second client to establish a session 
to communicate through the first node; from an address server, 

obtaining network address assignment information for the second client that 
generated the session initiation request, the assignment information including network 
address information to be used for identifying the second client; and 

populating the downstream routing policy information at the first node to include 
the network address information identifying the second client. 
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32. (New) A method as in claim 31 further comprising: 

receiving a network message from the second client coupled to communicate 
through the first node, the network message intended for receipt by the first client; 

utilizing the upstream routing policy information in the first node to identify a third 
path on which to forward the network message; and 

forwarding the network message from the first node along the third path to the 
second nodie. 
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